Assurance Associate, Third Party Attestation - Summer 2027 (Minneapolis)

We need to output only HTML fragment, no html/body tags, no markdown fences. Use

for section headings: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. Only include sections that have real specific content. We must preserve all substantive info, no invented details. Remove boilerplate: cookie/navigation/legal/EEO/equal-opportunity/scam-warning, duplicated lines, application instructions. Also drop Job ID/requisition numbers. We need to parse the job posting. Key sections: - Job Summary / Job Description: description of role: "The Assurance Associate, Third Party Attestation will be responsible for the preparation of third-party attestation reports, including SOC 1, SOC 2, SOC 3, SOC for Cybersecurity and WebTrust for CAs, as well as HITRUST, SSPA, ISO, MRC and CSA STAR applying most areas of the governing standard as necessary and documenting, validating, testing, and assessing various control systems, including internal controls. Our TPA individuals specialize in these specific areas to understand the entire technology risk umbrella rather than maintaining overall knowledge in Information Technology General Control (ITGC) audit or IT audit." That's about the role. - Job Duties: includes Control Environment, Gaas, Methodology, Research, Training. We need to capture duties as list items. - Education Qualifications, Knowledge, Skills and Abilities: includes Bachelor's degree required, Master's preferred, Experience required (About the role

. Then responsibilities under

Responsibilities

. Then qualifications under

Qualifications

maybe combine Education, Experience, Certifications. Skills under

Skills

. Benefits under

Benefits

. Pay under

Pay

. Ensure we don't repeat job title as heading. We must not include filler like "commensurate with experience". Not present. We need to preserve all substantive info. Let's extract details. Job Summary: "The Assurance Associate, Third Party Attestation will be responsible for the preparation of third-party attestation reports, including System and Organization Controls (SOC) 1, SOC 2, SOC 3, SOC for Cybersecurity and WebTrust for CAs, as well as HITRUST, SSPA, ISO, MRC and CSA STAR applying most areas of the governing standard as necessary and documenting, validating, testing, and assessing various control systems, including internal controls. Our TPA individuals specialize in these specific areas to understand the entire technology risk umbrella rather than maintaining overall knowledge in Information Technology General Control (ITGC) audit or IT audit." We'll put that in a

. Responsibilities: list items from the sections: Control Environment: - Identifying and considering all applicable policies, laws, rules, and regulations of the firm, regulators, or other authoritative bodies as part of engagement team - Making constructive suggestions to improve client internal control procedures - Documenting and validating the operating effectiveness of the clients’ internal control system - Documenting business and IT processes and controls and tests key controls for service organizations in a variety of industries - Identifying and prioritizing key risks, and assesses their impact and likeliness of occurrence - Communicating to the client areas to improve processes, strengthen controls, mitigate risks, and/or increase efficiency - Developing and maintaining relationships with client personnel and management - Ensuring technology is appropriately integrated into the examination process Gaas: - Developing and applying an intermediate knowledge of auditing theory, a sense of audit skepticism, and the use of BDO audit manuals - Applying auditing theory to various client situations - Documenting working papers and attestation reports in line with BDO policy, identifying deviations and notifying more senior team members in order to obtain appropriate approvals - Applying knowledge to identify instances where testing may be reduced or expanded and notifying more senior team members of the occurrence - Contributing ideas/opinions to the engagement team Methodology: - Completing all appropriate documentation of BDO work papers - Ensuring assigned work is performed in accordance with BDO methodology and requirements Research: - Researching basic and intermediate topics and forming an initial opinion on the treatment independently Training: - Attend professional development and training sessions on a regular basis - Complete required CPE hours to maintain applicable certifications We'll combine these into a single

• list. Qualifications: includes Education, Experience, Certifications. Education: - Bachelor’s degree in Accounting, Computer Science, Management Information Systems, Finance, Economics, Business Administration, Managerial Marketing and Entrepreneurship with a concentration in any of the previous areas noted, required - Master’s degree in Accounting, and minor or dual major in Information Systems or other relevant advanced degree, preferred Experience: - Less than one (1) year of prior experience in IT, internal or external audit or relevant industry experience, required - Leadership experience, preferred - Experience performing SOC, WebTrust, HITRUST, SOX, ISO 27001 and security/privacy advisory engagements, preferred - Prior internship or experience working within a public accounting or internal auditing environment, preferred License/Certifications: - One or more of the following certifications are preferred: - Certified Public Accountant (CPA) - Certified Information Systems Auditor (CISA) - Certified Information Systems Security Professional (CISSP) - ISO 27001 Lead Auditor certification - HITRUST Certified Common Security Framework Professional (CCSFP) - Certified Internal Auditor (CIA) - Certified Information Security Manager (CISM) - Certified Ethical Hacker (C | EH) (looks like a formatting issue; we keep as is) - Certified in Risk and Information Systems Control (CRISC) - Certified in the Governance of Enterprise IT (CGEIT) Software Proficiency: - Software Proficiency in Microsoft Office Suite, specifically Word, Excel, and PowerPoint, required We could combine these into Qualifications section. Skills: Other Preferred Knowledge, Skills & Abilities: - Strong written and verbal communication skills - Ability to follow instructions as directed - Ability to work effectively in a team setting - Ability to travel as necessary - Takes appropriate actions without being asked - Basic understanding of the planning and coordination stages of an audit preferred - Ability to successfully interact with professionals at all levels Also maybe "Individual salaries that are offered to a candidate are determined after consideration of numerous factors including but not limited to the candidate’s qualifications, experience, skills, and geography." That's more about pay determination; we could include in Pay section. Pay: Salary ranges per state: - California Range: $85,000 - $90,000 - Colorado Range: $73,000 - $77,000 - Illinois Range: $78,000 - $82,000 - Maryland Range: $83,000 - $87,000 - Massachusetts Range: $83,000 - $87,000 - Minnesota Range: $70,000 - $74,000 - New Jersey Range: $78,000 - $82,000 - NYC/Long Island/Westchester Range: $83,000 - $87,000 - Ohio Range: $71,000 - $75,000 - Virginia Range: $83,000 - $87,000 - Washington Range: $78,000 - $80,000 - Washington DC Range: $83,000 - $87,000 We'll list as
  • . Benefits: From About Us section: - BDO provides assurance, tax, and advisory services to clients across the U.S. and around the world. - We are proud to be an ESOP company, offering participants a stake in the firm’s success through beneficial ownership and a unique opportunity to enhance their financial well-being. - As a qualified retirement plan, the ESOP is a meaningful addition to our comprehensive compensation and Total Rewards benefits* offerings. - It also reinforces an ownership mindset that strengthens our connection to one another, our clients, and the future we’re building together. - Learn more about our benefits: BDO Total Rewards encompass more than traditional benefits. Click here to find out more ! Benefits may be subject to eligibility requirements. We should strip the "Click here to find out more !" maybe it's boilerplate? It's part of benefits description but could be considered navigation? It's a link instruction; maybe we should drop it as it's application instruction? It's not exactly application instruction but it's a link to learn more. The instruction says remove cookie/navigation/legal/EEO/equal-opportunity/scam-warning boilerplate, duplicated lines, and application instructions. "Click here to find out more !" is like a call to action for benefits; could be considered navigation. Safer to omit that phrase. We'll keep the descriptive sentences about ESOP, Total Rewards, etc. We'll produce Benefits section with a

    summarizing. We must not repeat job title as heading. We'll not include any heading for job title. We'll output only HTML fragment. Let's craft:

    About the role

    The Assurance Associate, Third Party Attestation will be responsible for the preparation of third-party attestation reports, including System and Organization Controls (SOC) 1, SOC 2, SOC 3, SOC for Cybersecurity and WebTrust for CAs, as well as HITRUST, SSPA, ISO, MRC and CSA STAR applying most areas of the governing standard as necessary and documenting, validating, testing, and assessing various control systems, including internal controls. Our TPA individuals specialize in these specific areas to understand the entire technology risk umbrella rather than maintaining overall knowledge in Information Technology General Control (ITGC) audit or IT audit.

    Responsibilities

    • Identifying and considering all applicable policies, laws, rules, and regulations of the firm, regulators, or other authoritative bodies as part of engagement team
    • Making constructive suggestions to improve client internal control procedures
    • Documenting and validating the operating effectiveness of the clients’ internal control system
    • Documenting business and IT processes and controls and tests key controls for service organizations in a variety of industries
    • Identifying and prioritizing key risks, and assesses their impact and likeliness of occurrence
    • Communicating to the client areas to improve processes, strengthen controls, mitigate risks, and/or increase efficiency
    • Developing and maintaining relationships with client personnel and management
    • Ensuring technology is appropriately integrated into the examination process
    • Developing and applying an intermediate knowledge